QuotifyBE/Controllers/UserContentController.cs

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using QuotifyBE.Data;
using QuotifyBE.Entities;
using QuotifyBE.DTOs;
using QuotifyBE.Mapping;
using Microsoft.AspNetCore.Cors;
using Microsoft.EntityFrameworkCore;

namespace QuotifyBE.Controllers;


[ApiController]
[EnableCors]
[Route("api/v1/uc")]
[Produces("application/json")]
public class UserContentController : ControllerBase
{

    private readonly IConfiguration _appsettings;
    private readonly ApplicationDbContext _db;
    private readonly GeneralUseHelpers guhf;

    public UserContentController(IConfiguration appsettings, ApplicationDbContext db, GeneralUseHelpers GUHF)
    {
        _appsettings = appsettings;
        _db = db;
        guhf = GUHF;
    }

    // GET /api/v1/uc/images
    /// <summary>
    /// [AUTHED] Get every image
    /// </summary>
    /// <remarks>
    /// Can (and will) return an empty list if no images are found in DB. <br/>
    /// Requires authorization with a JWT, has CORS set.
    /// </remarks>
    /// <response code="200">Returned on valid request</response>
    [HttpGet]
    [Authorize]
    [EnableCors]
    [ProducesResponseType(typeof(List<Image>), 200)]
    public async Task<IActionResult> GetImages()
    {

        // Get all the images
        List<Image> images = await _db.Images
                                        .ToListAsync();

        // Return to user
        return Ok(images);

    }


    // POST /api/v1/uc/images
    /// <summary>
    /// [AUTHED] Upload an image and get an its URI
    /// </summary>
    /// <remarks>
    /// Allows authorized users to publish images.
    /// A user-reachable path is returned on success.<br/>
    /// </remarks>
    /// <response code="200">Returned on valid request</response>
    /// <response code="400">Returned when file extension is unknown</response>
    /// <response code="406">Returned when request does not follow user-provided config</response>
    [HttpPost]
    [Authorize]
    [EnableCors]
    [ProducesResponseType(200)]
    [ProducesResponseType(typeof(ErrorDTO), 400)]
    [ProducesResponseType(typeof(ErrorDTO), 406)]
    public IActionResult PostNewImage(IFormFile file)
    {

        // Ideally, a hash of the file would be stored somewhere
        // in the database to have a basic redundancy check,
        // but this will do for now. ~eee4

        // A good idea would be to also check the Content-Type
        // of submitted files. ~eee4

        List<string> allowedExtensions = new List<string>() { ".jpg", ".jpeg", ".jfif", ".png", ".gif", ".avif", ".webp" };

        string fileExtension = Path.GetExtension(file.FileName);
        if (!allowedExtensions.Contains(fileExtension.ToLower())) {
            return BadRequest(new ErrorDTO {
                Status = "error",
                Error_msg = $"Unknown file extension. Please use one of the following: {string.Join(", ", allowedExtensions)}"
            });
        }

        // TODO:
        // https://www.youtube.com/watch?v=6-FNejMrVuk

        // Sprawdź, czy plik spełnia ograniczenia:
        // 1. Czy rozmiar jest mniejszy od _appsettings["UserContent"]["MaxFileSize"] ?


        // Jeśli nie, zwróć ErrorDTO ze wiadomością: $"File size exceeds {_appsettings["UserContent"]["MaxFileSize"]}"


        // Zapisz plik na dysku z pseudolosową nazwą GUID


        // Wrzucić go do folderu "uploads/images/"


        // Stwórz URL postaci: "/uploads/images/<nazwa pliku>.<rozszerzenie>"


        // Zwróć powyższy URL
        return Ok(new { Status = "ok", Filepath = "miejsce na wspomniany URL" });

    }

}